View difference between Paste ID: CCBwLNeb and xnhhnezr
SHOW: | | - or go back to the newest paste.
1
*Email sample*
2
3-
_Subject_: Problems with item delivery, n.XXXXXXXXXXX
3+
_Subject_: Courier was unable to deliver the parcel, IDXXXXXXXXX
4
5
_Body_:
6
7
Dear Customer,
8
9-
We could not deliver your item.
9+
Your parcel has arrived at June 26. Courier was unable to deliver the parcel to you.
10-
Please, download Delivery Label attached to this email.
10+
Shipment Label is attached to this email.
11
12-
Kind regards,
12+
Sincerely,
13-
Neil Osborn,
13+
Nathaniel Shaw,
14-
Operation Manager.
14+
Sr. Operation Manager.
15
16
17
In attachment a zip archive with a javascript file.
18
19
->Nemucod PHP variant<-
20
21-
Javascript sample - MD5: 5483fbf4d4a7810b6a887403b4f85c5a
21+
Javascript sample - MD5: dfcedaf4df86983865e4253029ded780
22-
VT: 9/55 - https://virustotal.com/en/file/b3e3f40ab35c55ea3c50c55ca9f0229252e54027378f99131db7f429e08e23ee/analysis/
22+
VT: 8/53 - https://virustotal.com/en/file/0a8f6b53cb49a76005897875d14c5e6e2aa6b9c4e4b24f16e60991e917f25c18/analysis
23
24
Distribution sites:
25
26-
xn--69-6kcia4af1cchlv\.xn--p1ai
26+
yolehamoise\.com
27-
www.website43\.ru
27+
imfoodi\.com
28-
xn--80adehatavpchebumw6c5a1f\.xn--p1ai
28+
decadence\.me
29-
xn----7sbabh0bdoslin5s\.xn--p1ai
29+
bloki\.internetdsl\.pl
30-
www.xn--80acysaebioq5f\.xn--p1ai
30+
www.drogariaglobo\.com\.br